Carries ISO 31000:2018 6.6 into privacy risk: the process and what it produces are watched continuously and reviewed at set times with clear responsibilities, at every step, covering planning, collecting and analysing information, recording results and giving feedback, with the results built into how the organization manages, measures and reports its performance. This standard's own wording is not held.
The graph holds this control, the 0 it maps to, and the evidence behind each claim, over MCP and REST.